arch/arm64/kvm/guest.c in KVM in the Linux kernel before 4.18.12 on the arm64 platform mishandles the KVM_SET_ON_REG ioctl. This is exploitable by attackers who can create virtual machines. An attacker can arbitrarily redirect the hypervisor flow of control (with full register control). An attacker can also cause a denial of service (hypervisor panic) via an illegal exception return. This occurs because of insufficient restrictions on userspace access to the core register file, and because PSTATE.M validation does not prevent unintended execution modes.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade kernelUpgrade kernel-develUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade python-perfUpgrade perf-debuginfo | Apr 27, 2020 | Oct 7, 2018 |
| Amazon_linux | — | Upgrade kernel | Nov 8, 2018 | Oct 7, 2018 |
| Centos_linux | — | Upgrade kernel | Aug 28, 2019 | Oct 7, 2018 |
| Debian | — | Upgrade linux | Oct 10, 2018 | Oct 7, 2018 |
| Oracle_linux | — | Upgrade kernel-uek | Jul 21, 2020 | Oct 3, 2018 |
| Redhat_linux | — | Upgrade kernel | Nov 27, 2018 | Oct 7, 2018 |
| Ubuntu | — | Upgrade linux-image-4.4.0-139-genericUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-virtualUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-raspi2Upgrade linux-image-lowlatencyUpgrade linux-image-4.15.0-47-lowlatencyUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-gcpUpgrade linux-image-4.4.0-139-lowlatencyUpgrade linux-image-4.15.0-47-generic-lpaeUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.15.0-1035-awsUpgrade linux-image-4.4.0-139-powerpc-smpUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.4.0-1104-snapdragonUpgrade linux-image-powerpc-e500mcUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-awsUpgrade linux-image-4.15.0-1010-oracleUpgrade linux-image-4.15.0-1029-gcpUpgrade linux-image-generic-lpaeUpgrade linux-image-powerpc64-embUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.15.0-47-snapdragonUpgrade linux-image-kvmUpgrade linux-image-powerpc64-smpUpgrade linux-image-gkeUpgrade linux-image-4.4.0-1072-awsUpgrade linux-image-4.4.0-1100-raspi2Upgrade linux-image-4.4.0-139-powerpc64-smpUpgrade linux-image-4.4.0-139-generic-lpaeUpgrade linux-image-snapdragonUpgrade linux-image-4.15.0-1041-azureUpgrade linux-image-4.15.0-1031-kvmUpgrade linux-image-4.4.0-1037-kvmUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.4.0-1034-awsUpgrade linux-image-powerpc-smpUpgrade linux-image-4.4.0-139-powerpc-e500mcUpgrade linux-image-4.15.0-1033-raspi2Upgrade linux-image-4.15.0-1035-oemUpgrade linux-image-azureUpgrade linux-image-4.15.0-47-genericUpgrade linux-image-oracleUpgrade linux-image-4.4.0-139-powerpc64-embUpgrade linux-image-genericUpgrade linux-image-aws-hweUpgrade linux-image-oem | Nov 23, 2018 | Oct 7, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub